Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File:                     lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier:          phyLsvjKXWfL1l9cMO0CLOmUzdmtRbjJfuf1S+uq7Yc=
Subject key identifier:   D9:14:B6:4A:C9:2C:E6:56:32:73:EB:1D:CB:0A:C7:13:C2:A4:FB:81
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer:       /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial:       0193568A9DF38700DD463DB004F47DF9256A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number:          11F8
Signing time:             Sat 23 Nov 2024 01:02:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:25 +0000
Files and hashes:         1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: r/6VozjD3ObAYMrSP4iSYiplGbb9LXXbDkdOS3nGF8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:9d:f3:87:00:dd:46:3d:b0:04:f4:7d:f9:25:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
        Validity
            Not Before: Nov 23 01:02:25 2024 GMT
            Not After : Nov 24 01:02:25 2024 GMT
        Subject: CN=d914b64ac92ce6563273eb1dcb0ac713c2a4fb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:0a:4f:e1:5a:3d:8a:5b:f4:4e:83:32:63:
                    22:22:ee:a4:64:5b:9e:a6:2f:64:d7:36:d8:be:6a:
                    4c:3f:82:09:44:69:c5:74:a9:cf:a7:e7:2f:58:18:
                    8c:50:72:4d:a1:25:a6:1e:16:85:8d:dd:84:8c:8e:
                    c0:1d:d0:4f:91:a9:c9:d7:fb:3b:be:0c:5e:78:b6:
                    e6:27:0e:68:58:9c:82:49:54:e0:f4:67:25:72:21:
                    77:42:07:f3:c2:1f:44:25:cf:0b:a8:ed:99:ac:00:
                    78:f7:df:3d:b5:2d:f8:b2:ed:74:9e:7c:bc:a0:5c:
                    11:01:a6:fc:e6:d4:69:8b:8d:8e:45:18:6d:09:81:
                    7e:0c:db:05:1b:b4:bb:e2:78:c1:bf:92:0c:90:65:
                    31:58:a5:93:9d:d7:ab:03:65:97:e3:1b:7f:19:05:
                    55:55:d6:1d:68:b1:1e:0a:2e:4b:aa:f7:bf:35:a2:
                    c6:71:27:c6:74:0d:11:7b:8a:8d:41:a0:b3:4d:92:
                    7b:ae:b5:28:7c:bd:51:f8:e8:70:d2:5a:59:35:2c:
                    c4:15:56:5e:10:b5:b3:a8:4d:bd:06:50:ea:1b:03:
                    cb:22:25:3d:27:cd:e1:d6:ff:fb:22:5c:bb:aa:7e:
                    e2:49:24:09:c0:85:dd:24:1f:46:02:09:c0:e9:bb:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:14:B6:4A:C9:2C:E6:56:32:73:EB:1D:CB:0A:C7:13:C2:A4:FB:81
            X509v3 Authority Key Identifier:
                keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:27:62:f4:5c:47:c1:c9:5b:78:67:7b:35:51:91:54:89:
         e0:8e:78:39:1e:f8:05:57:94:5b:bd:72:70:4b:7a:18:6c:a2:
         4a:56:84:b4:38:6e:55:3f:fb:23:35:6d:aa:83:5e:b9:8a:4a:
         6b:35:97:7a:f4:41:3c:9f:be:32:ea:1c:17:26:98:85:76:6a:
         a6:4e:26:7b:60:c4:79:3c:71:b2:d9:32:14:f2:5f:b8:d3:e1:
         ab:e3:9c:b0:a1:19:df:1c:b0:b9:96:65:10:c0:4a:40:49:1b:
         bc:b3:de:40:e0:4f:64:91:57:e8:aa:0e:cc:15:ba:b1:e6:a3:
         24:4c:fd:3e:cf:9c:27:de:b8:6f:14:2c:43:34:5d:23:30:4c:
         0c:0a:a2:9d:b2:68:24:72:c3:e0:40:6d:43:f1:97:c1:60:46:
         c3:26:0b:b2:d8:b5:84:3c:a9:19:c1:80:15:9f:b5:62:b6:0b:
         6f:21:08:d8:12:6e:c3:2e:ae:d3:b1:93:c9:30:75:b8:20:6e:
         41:f1:11:e1:6d:19:f0:ce:2b:11:51:73:50:db:2e:5f:dc:7c:
         35:ba:9d:bb:ab:69:7e:90:40:3d:b1:ee:1a:21:ca:e6:2b:93:
         9b:79:70:9e:48:cb:f5:7c:a5:56:8e:73:0e:66:f6:bf:c3:99:
         cb:d9:b9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWip3zhwDdRj2wBPR9+SVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0Zjg1OWRmODUzMWRmOTFhOTQwMDhmNGI0OTIwYTQxMjNl
YjBmMGIwHhcNMjQxMTIzMDEwMjI1WhcNMjQxMTI0MDEwMjI1WjAzMTEwLwYDVQQD
EyhkOTE0YjY0YWM5MmNlNjU2MzI3M2ViMWRjYjBhYzcxM2MyYTRmYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG8KT+FaPYpb9E6DMmMiIu6kZFue
pi9k1zbYvmpMP4IJRGnFdKnPp+cvWBiMUHJNoSWmHhaFjd2EjI7AHdBPkanJ1/s7
vgxeeLbmJw5oWJyCSVTg9GclciF3Qgfzwh9EJc8LqO2ZrAB49989tS34su10nny8
oFwRAab85tRpi42ORRhtCYF+DNsFG7S74njBv5IMkGUxWKWTnderA2WX4xt/GQVV
VdYdaLEeCi5Lqve/NaLGcSfGdA0Re4qNQaCzTZJ7rrUofL1R+Ohw0lpZNSzEFVZe
ELWzqE29BlDqGwPLIiU9J83h1v/7Ily7qn7iSSQJwIXdJB9GAgnA6btRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkUtkrJLOZWMnPrHcsKxxPCpPuBMB8GA1UdIwQY
MBaAFJT4Wd+FMd+RqUAI9LSSCkEj6w8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kYzkyMjQtM2NkNy00MzdkLWExZGMt
ZThjMzljZjY2YjNmLzEvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kYzkyMjQtM2NkNy00MzdkLWExZGMtZThjMzljZjY2YjNm
LzEvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuInYvRc
R8HJW3hnezVRkVSJ4I54OR74BVeUW71ycEt6GGyiSlaEtDhuVT/7IzVtqoNeuYpK
azWXevRBPJ++MuocFyaYhXZqpk4me2DEeTxxstkyFPJfuNPhq+OcsKEZ3xywuZZl
EMBKQEkbvLPeQOBPZJFX6KoOzBW6seajJEz9Ps+cJ964bxQsQzRdIzBMDAqinbJo
JHLD4EBtQ/GXwWBGwyYLsti1hDypGcGAFZ+1YrYLbyEI2BJuwy6u07GTyTB1uCBu
QfER4W0Z8M4rEVFzUNsuX9x8Nbqdu6tpfpBAPbHuGiHK5iuTm3lwnkjL9XylVo5z
Dmb2v8OZy9m5aw==
-----END CERTIFICATE-----